[Clamav-users] clamd running full throttle

2008-03-03 Thread Independent Edit 
Currently running ClamAV 0.90.3 on an OS X Server installation.

Recently, clamd will hog all of the server's CPU resources while it 
loads the virus database.  Sometimes it takes 15 minutes for the 
reload.  Fine, that only happens when the database is updated by 
freshclam.  But not today.  Now, every hour, clamd is detecting a 
database change and trying to reload, again hogging the server CPU.

Mon Mar  3 07:20:30 2008 - Database correctly reloaded (220846 
signatures)
Mon Mar  3 07:20:30 2008 - SelfCheck: Database status OK.
Mon Mar  3 07:35:23 2008 - SelfCheck: Database status OK.
Mon Mar  3 07:47:21 2008 - SelfCheck: Database status OK.
Mon Mar  3 08:07:28 2008 - SelfCheck: Database status OK.
Mon Mar  3 08:26:22 2008 - SelfCheck: Database modification detected. 
Forcing reload.
Mon Mar  3 08:26:22 2008 - Reading databases from /usr/share/clamav
Mon Mar  3 08:40:26 2008 - Database correctly reloaded (220846 
signatures)
Mon Mar  3 08:50:58 2008 - SelfCheck: Database status OK.
Mon Mar  3 09:01:29 2008 - SelfCheck: Database status OK.
Mon Mar  3 09:11:45 2008 - SelfCheck: Database modification detected. 
Forcing reload.
Mon Mar  3 09:11:45 2008 - Reading databases from /usr/share/clamav
Mon Mar  3 09:26:06 2008 - Database correctly reloaded (220846 
signatures)
Mon Mar  3 09:26:06 2008 - SelfCheck: Database status OK.
Mon Mar  3 09:36:34 2008 - SelfCheck: Database status OK.
Mon Mar  3 09:47:23 2008 - SelfCheck: Database status OK.
Mon Mar  3 10:02:17 2008 - SelfCheck: Database status OK.
Mon Mar  3 10:13:18 2008 - SelfCheck: Database modification detected. 
Forcing reload.
Mon Mar  3 10:13:18 2008 - Reading databases from /usr/share/clamav
Mon Mar  3 10:27:35 2008 - Database correctly reloaded (220846 
signatures)
Mon Mar  3 10:27:35 2008 - SelfCheck: Database status OK.
Mon Mar  3 10:37:48 2008 - SelfCheck: Database status OK.
Mon Mar  3 10:48:03 2008 - SelfCheck: Database status OK.
Mon Mar  3 10:59:31 2008 - SelfCheck: Database status OK.
Mon Mar  3 11:13:38 2008 - SelfCheck: Database modification detected. 
Forcing reload.
Mon Mar  3 11:13:38 2008 - Reading databases from /usr/share/clamav

What's going on here?

Thanks in advance!

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamd running full throttle

2008-03-03 Thread Török Edwin 
Independent Edit wrote:
 Currently running ClamAV 0.90.3 on an OS X Server installation.

 Recently, clamd will hog all of the server's CPU resources while it 
 loads the virus database.  Sometimes it takes 15 minutes for the 
 reload.  Fine,

You should upgrade to 0.92, which loads the DB *much* faster!

  
 Mon Mar  3 10:27:35 2008 - SelfCheck: Database status OK.
 Mon Mar  3 10:37:48 2008 - SelfCheck: Database status OK.
 Mon Mar  3 10:48:03 2008 - SelfCheck: Database status OK.
 Mon Mar  3 10:59:31 2008 - SelfCheck: Database status OK.
 Mon Mar  3 11:13:38 2008 - SelfCheck: Database modification detected. 
 Forcing reload.
 Mon Mar  3 11:13:38 2008 - Reading databases from /usr/share/clamav

 What's going on here?

 Thanks in advance!

What are the timestamps of files in /usr/share/clamav? Does any of it
change each hour?

--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamd running full throttle

2008-03-03 Thread Christopher X. Candreva 
On Mon, 3 Mar 2008, Independent Edit wrote:

 Currently running ClamAV 0.90.3 on an OS X Server installation.

You are running an outdated version. Current release is 0.92.1

There were many performance improvements since 0.90.x

==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 948-3162
WestNet Internet Services of Westchester
http://www.westnet.com/
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamd running full throttle

2008-03-03 Thread David Liang 
  Try to reduce freshclam download virus database times, or upgrade to
higher version.
 Currently running ClamAV 0.90.3 on an OS X Server installation.

 Recently, clamd will hog all of the server's CPU resources while it
 loads the virus database.  Sometimes it takes 15 minutes for the
 reload.  Fine, that only happens when the database is updated by
 freshclam.  But not today.  Now, every hour, clamd is detecting a
 database change and trying to reload, again hogging the server CPU.

 Mon Mar  3 07:20:30 2008 - Database correctly reloaded (220846
 signatures)
 Mon Mar  3 07:20:30 2008 - SelfCheck: Database status OK.
 Mon Mar  3 07:35:23 2008 - SelfCheck: Database status OK.
 Mon Mar  3 07:47:21 2008 - SelfCheck: Database status OK.
 Mon Mar  3 08:07:28 2008 - SelfCheck: Database status OK.
 Mon Mar  3 08:26:22 2008 - SelfCheck: Database modification detected.
 Forcing reload.
 Mon Mar  3 08:26:22 2008 - Reading databases from /usr/share/clamav
 Mon Mar  3 08:40:26 2008 - Database correctly reloaded (220846
 signatures)
 Mon Mar  3 08:50:58 2008 - SelfCheck: Database status OK.
 Mon Mar  3 09:01:29 2008 - SelfCheck: Database status OK.
 Mon Mar  3 09:11:45 2008 - SelfCheck: Database modification detected.
 Forcing reload.
 Mon Mar  3 09:11:45 2008 - Reading databases from /usr/share/clamav
 Mon Mar  3 09:26:06 2008 - Database correctly reloaded (220846
 signatures)
 Mon Mar  3 09:26:06 2008 - SelfCheck: Database status OK.
 Mon Mar  3 09:36:34 2008 - SelfCheck: Database status OK.
 Mon Mar  3 09:47:23 2008 - SelfCheck: Database status OK.
 Mon Mar  3 10:02:17 2008 - SelfCheck: Database status OK.
 Mon Mar  3 10:13:18 2008 - SelfCheck: Database modification detected.
 Forcing reload.
 Mon Mar  3 10:13:18 2008 - Reading databases from /usr/share/clamav
 Mon Mar  3 10:27:35 2008 - Database correctly reloaded (220846
 signatures)
 Mon Mar  3 10:27:35 2008 - SelfCheck: Database status OK.
 Mon Mar  3 10:37:48 2008 - SelfCheck: Database status OK.
 Mon Mar  3 10:48:03 2008 - SelfCheck: Database status OK.
 Mon Mar  3 10:59:31 2008 - SelfCheck: Database status OK.
 Mon Mar  3 11:13:38 2008 - SelfCheck: Database modification detected.
 Forcing reload.
 Mon Mar  3 11:13:38 2008 - Reading databases from /usr/share/clamav

 What's going on here?

 Thanks in advance!

 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://lurker.clamav.net/list/clamav-users.html



___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamd running full throttle

2008-03-03 Thread dennispe 

On Mar 3, 2008, at 9:39 AM, Independent Edit wrote:

 Currently running ClamAV 0.90.3 on an OS X Server installation.


This is not likely related, but Leopard has introduced an interesting  
bug that causes runaway cpu usage. So as to not taint the pool, google  
leopard runaway cpu to see what a wide range of problems exist.

That said, update your ClamAV installation as what you have is not  
representative of their best effort.

dp

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html